Cyber Security Monitoring Associate

The Cyber Security Monitoring Associate sits within the CPS HQ Digital & Information Directorate Security and Information Assurance Division Cyber Security Team and is responsible for monitoring the security and integrity of CPS Digital Information, assets, and infrastructure.

The Security Operations (SecOps)Team delivers a range of activities to support the implementation and compliance with CPS security policies via monitoring, threat hunting, incident response and Red/Blue Teaming exercises. The team are responsible for the designing, reviewing and maintaining of technical security controls. The team performs Security Administration tasks (SecAdmin) to ensure that Modern Workplace delivers a security assured service to the CPS.

The Crown Prosecution Service is based in England and Wales. If youre applying for this role and live in Scotland or Northern Ireland, you must let us know when accepting this offer as you need permission to work from your home address if hybrid working is part of your role. Theres no guarantee that we will grant this approval.

You must be aged 16 or over at the point of starting in this role. The expected start date is approximately 812 weeks after the application closing date. You are expected to commence employment as soon as possible following the expiry of your notice period. Requests for significantly later start dates may not be accommodated.

Your roles and responsibilities

• Monitor and protect CPS digital information, assets, infrastructure, and endpoint security to maintain the confidentiality, integrity, and availability of services.
• Conduct security monitoring, threat hunting, and incident response activities using Azure, Microsoft 365, and industry-standard security tools.
• Design, review, maintain, and administer technical security controls to support CPS security policies and a secure Modern Workplace environment.
• Analyse security alerts, telemetry, and cloud service data, including Microsoft 365 and Zscaler CASB, to identify and investigate potential threats.
• Support Zero Trust Architecture (ZTA) by monitoring endpoint activity and ensuring compliance with NCSC guidance and Microsoft Security Baselines.
• Collaborate with stakeholders to manage security incidents, improve security processes, and strengthen the organisation's overall cyber security posture.

A copy of the full job description is attached.